L · 09 2FA uses 6 digit slots with a separator between groups of threeL · 11 a failed code flips every slot red, border and text only, plus an inline calloutL · 12 success keeps the verified code visible, announces continuation, and has no dead-end actionRecovery stays absent until the consumer owns a working recovery-code route